Request attribute instead of session attribute